Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: Mx33rho8l3m3QVebtaRZcfo2yy11HDgqDMYprLMyZDU=
Subject key identifier: A9:B9:02:D3:B9:91:B9:E7:CD:25:1B:09:3B:90:A9:04:45:3D:44:52
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 01A13F029117930671C6477D41CF55689FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 17C8
Signing time: Thu 15 Oct 2026 10:01:35 +0000
Manifest this update: Thu 15 Oct 2026 10:01:35 +0000
Manifest next update: Fri 16 Oct 2026 10:01:35 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: jAEBPOa+HNshsyN8l7AG6GEeXYSBF1TS6JYPCUVQ3fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:91:17:93:06:71:c6:47:7d:41:cf:55:68:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Oct 15 10:01:35 2026 GMT
Not After : Oct 16 10:01:35 2026 GMT
Subject: CN=a9b902d3b991b9e7cd251b093b90a904453d4452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:03:50:82:60:f0:47:e3:b0:6b:6f:33:b6:
1a:68:a8:86:35:27:a3:13:35:ff:9f:0f:c0:a2:4a:
a3:88:f7:04:c2:20:e7:1c:95:e2:7f:50:69:a4:1a:
8f:5b:53:67:e4:6e:7e:38:52:a8:40:e7:af:a5:44:
f7:f8:54:de:f3:51:09:96:b7:4b:3a:cf:cf:a5:a8:
78:8c:19:3e:71:d7:0d:31:0c:a9:57:8e:ea:03:d6:
e4:82:cc:d2:8e:34:d0:34:4a:20:99:d0:50:3d:1a:
0f:85:b6:7a:80:cd:3d:5c:c8:15:05:38:3b:e3:e6:
9b:76:e7:c7:ce:1c:f5:cb:f5:eb:60:14:e7:7c:7c:
24:85:d3:e6:b0:e5:ee:1c:23:34:97:66:91:b3:c8:
7f:54:8f:95:27:d3:ce:bf:7b:aa:74:09:8a:7d:d7:
b6:c5:b7:ab:b6:e3:52:87:d2:3e:8b:24:df:e7:9f:
8e:53:82:63:db:7a:05:e9:59:66:37:c6:9a:cd:29:
69:7a:8e:7c:91:41:2c:f0:f7:91:c5:71:3f:3e:35:
78:27:d6:d4:72:ea:4e:98:34:1f:58:4b:e4:43:e4:
70:de:26:27:37:7c:f6:48:8c:2b:79:56:0a:6a:6e:
44:1c:be:74:3b:d1:d3:40:88:5e:be:d9:ef:16:ed:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:02:D3:B9:91:B9:E7:CD:25:1B:09:3B:90:A9:04:45:3D:44:52
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f3:c0:0e:5e:f3:9a:09:61:15:72:b8:00:2e:b3:3d:70:d0:
11:40:5c:fc:5a:11:4c:45:70:82:eb:4e:6d:4c:50:96:88:07:
ee:7c:46:64:9a:4d:60:6b:ae:96:7b:c7:a1:03:67:0c:8e:8d:
90:cb:a9:6f:fc:c9:c0:c4:7e:ea:82:c0:9b:0d:32:0e:38:50:
6a:ce:ed:ed:c0:be:a0:1a:75:a4:e4:c3:65:db:6c:74:f3:ad:
bf:52:7d:e7:4e:20:0f:85:68:80:b2:85:52:c0:9c:ea:89:bd:
db:22:f4:41:39:57:db:45:f9:9c:d3:49:27:be:cf:0f:20:48:
7e:89:e0:bc:3e:39:ad:96:74:83:d7:3d:a0:31:4f:52:a8:5e:
28:49:9b:62:59:b9:64:6a:c0:00:06:0e:ad:ab:08:39:69:28:
6d:1a:3e:59:3e:9f:ba:1a:cd:14:5a:b8:66:6c:70:00:e0:49:
5a:57:15:5e:fe:96:2c:e0:e8:d5:a4:fc:53:e2:0a:5b:23:15:
af:8c:a0:0c:3e:f1:7e:99:f2:b7:ea:77:dc:14:0f:ff:11:c2:
5f:fb:3b:fe:d0:a7:db:91:b7:64:fe:cd:46:94:1b:ab:fd:c8:
5a:14:a2:80:62:0b:95:9f:e4:0e:25:53:6e:b9:4d:19:cd:b0:
78:af:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:06 2026 by rpki-client